There is no whitelist, only a blacklist. Security best practice is whitelisting not blacklisting.

Clients on the guest network can "see" each other (all services, all protocols). This is not how a guest network should function. Instead, security best practice is clients on a guest network should...